Logstash WMI Input Plugin donot work

Elastic Stack Logstash
1

I am new to logstash and i want to gather the performance metrics of the windows system. I have been trying to run the WMI input plugin of logstash in my local setup to gather data, but it is not getting executed .This is the logstash configuration.

input {
       wmi {
        query => "select * from Win32_Process"
        interval => 10
		host => "127.0.0.1"
      }
}

output { 
	stdout {codec => rubydebug} 
}

i can run above query in the powershell and i get the data. Below is the error logs i get when i run the logstash.

G:\elastic-stack\logstash-7.9.0>.\bin\logstash.bat -f .\config\logstash.conf
Sending Logstash logs to G:/elastic-stack/logstash-7.9.0/logs which is now configured via log4j2.properties
[2020-09-03T17:12:01,289][INFO ][logstash.runner          ] Starting Logstash {"logstash.version"=>"7.9.0", "jruby.version"=>"jruby 9.2.12.0 (2.5.7) 2020-07-01 db01a49ba6 Java HotSpot(TM) 64-Bit Server VM 25.241-b07 on 1.8.0_241-b07 +indy +jit [mswin32-x86_64]"}
[2020-09-03T17:12:01,623][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2020-09-03T17:12:05,198][INFO ][org.reflections.Reflections] Reflections took 75 ms to scan 1 urls, producing 22 keys and 45 values
[2020-09-03T17:12:07,548][INFO ][logstash.javapipeline    ][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>500, "pipeline.sources"=>["G:/elastic-stack/logstash-7.9.0/config/logstash.conf"], :thread=>"#<Thread:0x59ce47fe run>"}
[2020-09-03T17:12:08,533][INFO ][logstash.javapipeline    ][main] Pipeline Java execution initialization time {"seconds"=>0.94}
[2020-09-03T17:12:08,553][INFO ][logstash.inputs.wmi      ][main] Registering wmi input {:query=>"select * from Win32_Process"}
[2020-09-03T17:12:13,858][ERROR][logstash.agent           ] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil}
[2020-09-03T17:12:14,494][INFO ][logstash.agent           ] Successfully started Logstash API endpoint {:port=>9600}
[2020-09-03T17:12:19,418][INFO ][logstash.runner          ] Logstash shut down.
[2020-09-03T17:12:19,539][ERROR][org.logstash.Logstash    ] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.